Steam Guard and 2FA
Steam protects accounts with a second code at sign-in. The bot has to get past it too. You can hand it the code each time, or set it up once and never think about it again.
Why the bot asks for a code
If your Steam account has Steam Guard enabled — and almost every account does — Steam will not accept a password alone. It also wants a code: either from the Steam mobile app, or e-mailed to you.
When a bot needs one, it says so on the Dashboard and stops there, waiting. Enter the code and it carries on signing in. Nothing is lost while it waits.
The two ways to handle it
Enter the code manually
The simplest option, and perfectly fine if your bots run for weeks at a time. Steam only asks on a fresh sign-in — not every hour, and not on reconnects. In practice this means typing a code when you first add the bot, and then rarely.
Let the bot generate its own codes
If you would rather never be asked, give the bot your shared secret. That is a string Steam gives your account when mobile authentication is set up; with it, the bot can generate the same six-digit codes the mobile app does, on its own.
Add it in the bot's settings, in the field marked Shared secret. From that point on, sign-ins are silent.
The related Identity secret does a different job: it lets the bot confirm trades and Market listings the way you would tap "confirm" in the mobile app. You need it if you want cards transferred to your main account without you approving each offer by hand.
Both secrets come from the Steam mobile app's own data, and extracting them takes a separate tool — we deliberately do not provide one, because that would mean handling your authenticator. Search for how to extract shared_secret and identity_secret for your platform, and be careful whose tool you run.
Anyone holding your shared secret can generate valid Steam Guard codes for your account — it is as sensitive as the password itself. We store both encrypted, never display them back, and never send them anywhere. Do not paste them into random websites.
Steam asks again out of nowhere
Two common reasons. Either the account password was changed — Steam then rejects the saved sign-in and the bot needs the new password plus a fresh code — or Steam decided the session looked unusual and asked again. Both show up on the Dashboard as a bot waiting for a code. Give it one and it continues.